<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: apache-software-foundation-apache-ambari</title><description>Every new CVE for apache-software-foundation-apache-ambari.</description><link>https://agentprime.io/</link><item><title>CVE-2024-51941: Apache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts</title><link>https://agentprime.io/advisories/CVE-2024-51941/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-51941/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jan 2025 21:24:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-23196: Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition</title><link>https://agentprime.io/advisories/CVE-2025-23196/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23196/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jan 2025 21:23:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-23195: Apache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie</title><link>https://agentprime.io/advisories/CVE-2025-23195/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-23195/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jan 2025 21:22:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-13924: Apache Software Foundation Apache Ambari: In Apache Ambari versions 2.6.2.2 and earlier…</title><link>https://agentprime.io/advisories/CVE-2020-13924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-13924/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Mar 2021 09:05:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-8042: Apache Software Foundation Apache Ambari: Apache Ambari, version 2.5.0 to 2.6.2…</title><link>https://agentprime.io/advisories/CVE-2018-8042/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-8042/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Jul 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-8003: Apache Software Foundation Apache Ambari: Apache Ambari, versions 1.4.0 to 2.6.1…</title><link>https://agentprime.io/advisories/CVE-2018-8003/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-8003/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 May 2018 23:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-5655: In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host.</title><link>https://agentprime.io/advisories/CVE-2017-5655/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-5655/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 May 2017 14:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-5654: In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes.</title><link>https://agentprime.io/advisories/CVE-2017-5654/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-5654/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 May 2017 21:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-5642: During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.</title><link>https://agentprime.io/advisories/CVE-2017-5642/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-5642/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Apr 2017 16:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>